Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa
File: 647f9435-6948-34d1-9a8e-d32e6d7948c2.roa (raw, json)
Hash identifier: Dj5EhB/PsMnVVGfytuDr+oRsQ4gnqVOrw2v/7T+kkaU=
Subject key identifier: F0:CC:09:60:B6:E8:92:C5:C1:97:74:48:D4:B9:3D:34:BF:56:7A:13
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A581C1F1DB626B8845280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:58:1c:1f:1d:b6:26:b8:84:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=fa8852bc-393c-4651-9aab-047b35596dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:74:6f:aa:74:d8:4b:89:7f:41:e4:1a:6d:
f5:61:b8:14:a0:44:a5:74:c4:d7:ad:2e:52:4f:0a:
4c:5c:46:0d:98:01:0e:0a:9a:5c:f2:7d:9f:c3:3b:
29:79:af:5f:ce:3a:4d:73:ec:1e:e8:d1:f2:31:ea:
c1:8b:b7:6e:2d:dd:4b:0f:78:3f:6a:12:3f:29:92:
b2:1c:e7:c7:a7:42:6d:f2:3a:f9:90:03:3e:5e:a2:
d0:56:b9:73:f0:a5:39:0c:91:69:d8:31:ac:43:cb:
c1:82:7b:45:c8:56:95:58:da:b1:e0:e4:94:40:93:
bc:8d:ed:0b:3f:0c:37:8a:9e:e9:7f:e2:4d:71:94:
6a:0a:01:31:80:dd:2b:fd:10:94:07:8d:ad:ba:e0:
9d:65:3b:a9:0e:a8:65:51:04:af:0f:62:03:1a:ea:
d3:a9:6d:c4:35:23:f5:1a:ad:30:d4:41:82:19:c6:
1d:10:31:44:15:ca:c5:c3:00:d3:85:b2:04:0c:df:
f9:df:e5:98:c1:d8:28:7b:d2:d6:9c:1b:17:01:45:
0e:4a:43:b3:6a:af:4b:c5:7c:c6:f1:9b:18:b5:59:
96:55:de:7c:30:db:34:04:6e:59:59:44:6e:43:01:
8b:5e:05:07:9d:5d:13:f0:f9:84:21:20:5d:8b:5f:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CC:09:60:B6:E8:92:C5:C1:97:74:48:D4:B9:3D:34:BF:56:7A:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:e7:9e:f6:ac:28:4f:ff:f6:70:9a:10:90:fa:9c:4f:19:2a:
a1:e0:86:48:9a:8c:6c:44:fd:a3:21:da:e8:1c:4f:82:bd:66:
2a:0c:8d:31:19:8e:50:7e:ec:ce:78:cd:ba:fa:97:57:d3:0c:
18:1e:a3:5e:57:51:3c:08:3e:85:c6:9f:0a:5a:f7:9f:26:b7:
2b:9c:77:e7:ef:e6:a2:7d:ef:3e:11:2d:98:d7:dc:16:fe:6b:
98:f6:39:80:5f:b7:e9:84:ec:90:ac:9a:b0:ea:a3:f7:12:01:
40:38:b5:5c:31:9a:1f:00:3e:51:3a:ff:93:29:f6:aa:a9:d8:
65:8a:a5:92:3a:0c:bb:b2:dd:b4:b4:10:77:d2:eb:17:56:98:
3c:32:00:c0:ac:c4:49:c7:dc:be:0e:58:94:8d:46:c3:c6:75:
06:db:1f:6e:aa:51:cd:a2:f5:c0:d8:52:0f:c1:d8:9c:a2:2e:
2c:6f:73:19:8d:cd:43:33:aa:8b:b0:9b:fb:48:ba:ef:5c:62:
76:e9:1b:5f:24:ad:b0:e9:5e:c2:14:5e:b9:68:dd:87:39:9c:
23:dd:ad:5c:50:1f:92:50:b0:33:64:a3:f9:94:59:fc:af:17:
a6:65:dc:d5:97:0a:ba:0e:da:42:1f:8e:99:ab:0f:7a:e4:2d:
fa:7c:03:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SlgcHx22JriEUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
ZmE4ODUyYmMtMzkzYy00NjUxLTlhYWItMDQ3YjM1NTk2ZGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQB0b6p02EuJf0HkGm31YbgUoESldMTXrS5S
TwpMXEYNmAEOCppc8n2fwzspea9fzjpNc+we6NHyMerBi7duLd1LD3g/ahI/KZKy
HOfHp0Jt8jr5kAM+XqLQVrlz8KU5DJFp2DGsQ8vBgntFyFaVWNqx4OSUQJO8je0L
Pww3ip7pf+JNcZRqCgExgN0r/RCUB42tuuCdZTupDqhlUQSvD2IDGurTqW3ENSP1
Gq0w1EGCGcYdEDFEFcrFwwDThbIEDN/53+WYwdgoe9LWnBsXAUUOSkOzaq9LxXzG
8ZsYtVmWVd58MNs0BG5ZWURuQwGLXgUHnV0T8PmEISBdi1+2BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPDMCWC26JLFwZd0SNS5PTS/VnoTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQ3Zjk0MzUtNjk0OC0z
NGQxLTlhOGUtZDMyZTZkNzk0OGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7nnvasKE//9nCaEJD6nE8ZKqHghkiajGxE/aMh2ugcT4K9ZioMjTEZ
jlB+7M54zbr6l1fTDBgeo15XUTwIPoXGnwpa958mtyucd+fv5qJ97z4RLZjX3Bb+
a5j2OYBft+mE7JCsmrDqo/cSAUA4tVwxmh8APlE6/5Mp9qqp2GWKpZI6DLuy3bS0
EHfS6xdWmDwyAMCsxEnH3L4OWJSNRsPGdQbbH26qUc2i9cDYUg/B2JyiLixvcxmN
zUMzqouwm/tIuu9cYnbpG18krbDpXsIUXrlo3Yc5nCPdrVxQH5JQsDNko/mUWfyv
F6Zl3NWXCroO2kIfjpmrD3rkLfp8A6M=
-----END CERTIFICATE-----
Generated at Fri May 9 19:42:44 2025 by rpki-client